Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
File: Z31OosAWzieXr3rrc30TKHVmnxI.mft (raw, json)
Hash identifier: LGRSvznvWqPY55vqX15894JlYYQP/6oJpnh/3nLg6aQ=
Subject key identifier: 9F:67:9A:F8:ED:25:B6:BF:80:BD:09:7C:31:53:DE:DC:89:9E:E3:92
Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12
Certificate serial: 019D39409E5ECF18C6DC6E7E7BE20CE7B607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
Manifest number: 0D9F
Signing time: Sun 29 Mar 2026 11:00:29 +0000
Manifest this update: Sun 29 Mar 2026 11:00:29 +0000
Manifest next update: Mon 30 Mar 2026 11:00:29 +0000
Files and hashes: 1: 4Bv5xQ3eOktWbNiksOI6_CyDYwE.roa (hash: AzbxLrQ0rBUs69Ie4HmTc38VBCdV7Bu9rChwxjbGaTI=)
2: Z31OosAWzieXr3rrc30TKHVmnxI.crl (hash: yd2iMfFh6LTW/6gJXayvRLD7231S2q3YI/t7puCqYZQ=)
3: fdwbgBklrjdovCeYbqvQYFGn8iQ.roa (hash: 8Me+/KWLgHoPwHgTQu4VQrh3NLbvTzJ2Ie0jnlhQSkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:9e:5e:cf:18:c6:dc:6e:7e:7b:e2:0c:e7:b6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12
Validity
Not Before: Mar 29 11:00:29 2026 GMT
Not After : Mar 30 11:00:29 2026 GMT
Subject: CN=9f679af8ed25b6bf80bd097c3153dedc899ee392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9a:bf:bb:0c:7c:df:99:56:11:61:63:49:47:
41:07:2d:dd:2a:ae:52:d8:37:3c:84:f7:87:48:57:
86:90:1c:96:4c:0c:b1:d0:f5:0a:74:3b:c4:95:88:
2e:75:3a:2b:ab:7a:82:a7:42:bd:99:e0:31:6c:6c:
5e:51:3f:d0:56:5c:dc:3f:fa:2f:b9:b1:d8:3a:63:
2f:c1:91:73:f7:55:70:e6:26:53:ec:e9:a2:b0:7f:
72:ec:8c:3c:2a:a3:0d:8d:4a:e8:a1:ed:a2:fc:68:
55:ef:0e:ad:d0:1a:7e:7c:89:8a:07:73:e3:bb:80:
09:a2:fc:ba:ab:ef:98:32:2a:97:ad:5f:af:32:e2:
d5:e7:12:c1:49:91:a5:0b:bd:bc:9d:83:6b:0f:2c:
df:18:5b:47:05:a3:49:1e:21:a4:ec:b3:fc:35:95:
f3:e4:36:0d:d9:d9:f4:9c:02:6c:64:2e:47:6a:4f:
c9:51:30:d1:56:74:4e:0b:4f:cb:95:fb:ec:09:6e:
2b:05:6c:64:8b:57:0d:91:d6:a5:ed:f2:09:ca:df:
87:d9:16:a8:f9:13:4d:10:ef:f6:ae:6c:73:61:4d:
b5:f3:28:75:c2:73:7f:5d:03:a4:f5:ff:0f:9b:11:
0a:37:64:f3:94:a6:75:82:1c:4f:72:1e:b8:a4:26:
55:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:67:9A:F8:ED:25:B6:BF:80:BD:09:7C:31:53:DE:DC:89:9E:E3:92
X509v3 Authority Key Identifier:
keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ea:f4:66:60:5d:aa:84:ac:cc:66:00:36:66:34:2f:f7:b1:
a8:7e:ee:7c:b8:a1:10:2c:26:74:3b:9c:94:96:48:da:33:66:
4c:4a:90:26:1e:cb:d1:7c:50:4f:81:fe:f7:97:02:5e:0d:af:
0a:e3:3e:45:74:c2:80:0c:43:2d:bd:c2:3f:fa:22:bb:60:85:
05:74:43:c8:83:a0:eb:9c:54:b2:9b:78:67:24:8c:ab:4e:c0:
d0:98:37:00:bb:fb:1c:98:bf:e6:ed:16:ec:54:d0:58:28:79:
1a:c2:43:35:e0:63:3c:07:7c:6a:6a:82:c6:74:40:cd:69:4d:
d5:4b:1a:7c:1d:c9:6b:f2:90:19:30:ff:8c:80:28:80:25:eb:
fd:d5:41:22:78:18:9e:e4:a1:bb:39:e4:7a:36:c4:5f:c0:c2:
2d:44:39:4c:9e:50:19:b1:8a:95:e5:eb:e2:75:8f:b7:fd:34:
18:6f:95:20:76:3d:d8:93:d0:5b:4c:07:f6:03:45:c3:ea:cb:
22:68:c9:34:26:e9:5f:de:de:16:2e:22:d2:a9:23:66:3f:3c:
2e:06:a3:53:8d:ca:85:de:ce:29:bb:3a:f8:88:4f:0f:fc:fe:
b2:db:69:51:47:4d:a5:18:3c:43:48:b9:98:88:3a:d6:5e:a4:
50:27:72:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:47:34 2026 by rpki-client